Medium
CVE-2024-13362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2025-6067
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Medium
CVE-2024-30526
Easy Social Feed <= 6.5.6 - Cross-Site Request Forgery
Medium
CVE-2024-1219
Easy Social Feed <= 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30180
Easy Social Feed <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fb_appid
Medium
CVE-2024-1278
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1214
Easy Social Feed <= 6.5.4 - Cross-Site Request Forgery
Medium
CVE-2024-1213
Easy Social Feed <= 6.5.4 - Cross-Site Request Forgery
Medium
CVE-2023-6883
Easy Social Feed <= 6.5.2 - Missing Authorization to Settings Modification
Medium
CVE-2023-48740
Easy Social Feed <= 6.5.1 - Missing Authorization via hide_free_sidebar()
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2022-4474
Easy Social Feed <= 6.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2021-25120
Easy Social Feed <= 6.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.